Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
File:                     ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json)
Hash identifier:          vb0suSqnyPGNABpVlqUO5H8qC+wE6CLDYn2ffd5Y0As=
Subject key identifier:   1C:E8:17:80:0D:BD:88:93:29:12:4F:F9:19:36:9D:28:D0:54:44:18
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Certificate issuer:       /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial:       3638
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
Manifest number:          35C5
Signing time:             Thu 06 Aug 2026 14:51:59 +0000
Manifest this update:     Thu 06 Aug 2026 14:51:58 +0000
Manifest next update:     Thu 13 Aug 2026 14:51:58 +0000
Files and hashes:         1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: 4N+l0f9i+ycYBSXbg3nChs1Gx8EB2rzdDflm2M9DPwo=)
                          2: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: mK73bfSEN6zR8+iXpbDtVPOlbDMpY+j7LIX++cafcEE=)
                          3: D343067C86EC11F19E006003A7EE528E.roa (hash: MwabdDtsR88t/I1zQatof0zHAy5NQHDXaMUX2ZWtv1k=)
                          4: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: 8S+zuChDcqGL9ZeLsJ6JHvqala1ytBwLnGv387U8Cx0=)
                          5: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: 5d46M17tPjCDpGTGqDqbIScbNZIYW2F1SqaVmxxIbOY=)
                          6: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: 8+4nPBH0mKjruMVqsF1eFTkdvjJp7WM7Sk6y7pERmRQ=)
                          7: D2392E7886EC11F19E006003A7EE528E.roa (hash: /EKK1bYish9YkpKFk7lZQQfQE2DHY5Z3eS0D3n247UA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Aug 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13880 (0x3638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
        Validity
            Not Before: Aug  6 14:51:58 2026 GMT
            Not After : Aug 13 14:51:58 2026 GMT
        Subject: CN=6a749f8e-4a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7a:75:f1:5a:cc:3d:58:e3:16:29:54:a2:b7:
                    88:46:f6:a1:25:fb:43:4b:d0:a6:c4:62:4c:4e:02:
                    28:19:a5:30:c0:0b:76:61:23:f3:d6:9e:97:48:17:
                    28:92:e2:c5:05:10:15:d0:d1:fd:f5:f6:0b:c3:54:
                    7c:f3:38:0f:e5:e3:56:88:ed:cb:45:80:94:11:48:
                    ca:97:00:81:a9:65:9d:db:34:63:bb:b3:4d:43:76:
                    56:01:15:8a:24:92:70:d7:ee:39:aa:4b:ac:1a:90:
                    c5:a1:96:d8:c8:7a:6f:3e:db:30:5e:3f:f4:75:66:
                    96:45:c9:ac:cd:e8:1a:f5:e9:8d:26:05:b7:2e:0c:
                    49:15:c2:6a:36:24:74:ca:fb:c8:d1:14:76:e8:6d:
                    93:1e:da:50:f8:45:cc:9d:76:de:76:81:21:a8:99:
                    df:a0:a5:7d:15:f5:fd:a1:33:5d:b0:c2:e4:e4:53:
                    6b:dc:6a:fb:74:97:16:67:0c:f3:00:0b:78:90:f4:
                    03:25:8e:d1:15:c1:6d:5f:ed:f9:0d:50:f6:95:07:
                    31:f9:56:e4:1a:c7:40:ba:73:01:ce:63:e4:ac:1d:
                    4d:18:65:f0:db:21:4b:be:f5:86:39:68:fa:6e:18:
                    5a:e6:3a:a0:c7:96:4a:ad:54:22:72:d4:18:1b:5a:
                    c4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E8:17:80:0D:BD:88:93:29:12:4F:F9:19:36:9D:28:D0:54:44:18
            X509v3 Authority Key Identifier:
                keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ac:66:e9:45:f8:78:b0:6e:f1:02:39:ad:6a:8f:93:61:2f:
         19:14:03:42:5e:02:e4:fe:8c:4c:76:6d:cd:b0:ed:58:25:62:
         b9:82:53:b0:27:f7:9d:82:69:87:bb:6d:d4:ba:d2:19:b4:6e:
         58:ff:ee:9a:31:f9:81:2f:1f:fc:f8:18:09:d7:f1:40:ec:8a:
         32:64:d4:8e:ea:b3:d2:27:b9:04:17:9b:2e:c5:fa:65:b4:03:
         60:e4:37:c1:29:eb:67:bd:a4:ad:dd:92:c8:d8:40:1d:04:d2:
         97:f4:aa:86:0f:36:50:53:0e:f9:0d:d5:5a:55:83:43:30:a0:
         9c:f6:4e:f7:fc:6e:ed:e3:f9:75:22:f5:07:5f:84:a9:9b:0d:
         41:d3:66:1c:4b:ba:a6:1b:ee:5b:67:fd:2d:35:c1:a2:27:67:
         cb:6e:4a:83:1b:4e:c9:7e:ba:f8:5a:1f:19:e2:c0:ff:26:e9:
         38:fb:60:35:ee:53:e7:11:8a:1e:88:e9:97:4c:d7:2d:eb:bb:
         0e:c0:3f:b7:df:07:9f:7d:93:04:70:86:ab:f3:6a:d0:d2:83:
         5d:c6:f1:52:ae:ad:c5:8f:e4:4f:b8:b4:5f:95:55:06:ec:00:
         22:12:be:5a:17:85:61:94:db:9e:a1:db:ec:c1:30:35:e1:ca:
         3a:b8:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 17:31:07 2026 by rpki-client